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ABSTRACT 

One  of  the  most  widely  used 
approaches  to  computing  system  reliability 
Is  to  represent  the  system  structure  in 
terms  of  a  Boolean  sum  of  all  mlnpaths. 
This  expression  is  then  transformed  Into  a 
sum  of  disjoint  terms.  The  probability  of 
each  term  is  then  summed  to  obtain  the 
reliability  of  the  system.  A  key  question 
with  respect  to  the  difficulty  of  this 
process  relates  to  the  ability  to 
transform  the  Initial  sum  Into  a  sum  of 
disjoint  products.  In  this  paper,  we  show 
that  for  the  class  of  shellable  ayatems, 
there  always  exists  a  disjoint  product 
expression  with  a  number  of  terms  equal  to 
the  number  of  mlnpaths.  He  provide 
several  examples  of  shellable  systems  for 
which  such  an  expression  can  be 
efficiently  found. 


fall  independently.  A  structure  function 
p  is  given  which  maps  the  nnvector 

. . . . . . xn)  of  component  Indicators 

(xj«l  if  component  1  operates,  and  0 
otherwise)  into  the  system  status  (p(x)-1 
If  the  system  operates  and  0  otherwise). 

He  assume  that  the  function  +  is  coherent , 
that  Is,  t(0)  -  0,  fO)  •  t  and  d 
nondecreasing  In  eaetr'eomponent .  In  this 
case,  the  function  d  can  be  described 

oompletely  by  giving  the  set  |Tj . Tr ) 

of  mlnpaths .  that  Is,  Tj  Is  a  minimal  set 
of  components  whose  operation  Insures 
system  operation.  It  follows  that  d(x) 
equals  1  If  and  only  if  the  set  {jixj  —  1  ( 
of  operating  components  contains  at  least 
one  of  the  mlnpaths  Tj.  Thus  the  event  of 
system  operation  can  be  described  as  the 
union  of  events  (denoted  by  plus) 

d  1  f 


Introduction 

In  this  paper  we  consider  the 
property  of  shellablllty  of  a  coherent 
system,  and  show  how  It  can  be  used  to 
compute  or  approximate  reliability  for 
these  systems.  In  particular,  we  show  how 
one  can  directly  evaluate  the  disjoint 
products  form  for  reliability  by  writing 
this  expression  as  a  shelling  for  the 
system.  He  also  Indicate  how  the  property 
of  shellablllty  can  help  to  construct  good 
approximations  to  reliability  when  even 
the  disjoint  products  method  Is  too 
cumbersome.  He  present  several 
applications  for  which  the  underlying 
system  is  shellable,  and  give  examples  to 
show  the  shelling. 


where  Ai  represents  the  event  that  all 
components  of  Tj  operate.  Unfortunately, 
one  cannot  Immediately  write  the 
probability  Tor  this  expression  because 
the  events  are  not  disjoint.  One  or  the 
ways  to  proceed  is  to  write  the  above 
expression  In  disjoint  products  form,  that 
Is,  as  a  union  of  mutually  exclusive 
events 


*1 *2  *'  •  ’ **1^2*  * "^rm 1 Ar 


where  product  denotes  intersection  and  bar 
denotes  the  complementary  event.  The 
probability  of  system  operation  oan  now  be 
written  as  the  sum  of  probabilities  of  the 
events 


1 .  Definitions  and  Notation 

Consider  a  set  N  of  n  components . 
Each  component  1  is  subject  to  failure 
with  probability  pj ,  and  all  components 


■The  work  of  this  author  was  supported  in 
part  by  the  Air  Foroe  Office  of  Scientific 
Research  under  contract  AFOSR-84-0140 . 
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and  the  problem  Is  reduced  to  computing 
the  probabilities  of  each  of  the  R^ 

Many  papers  have  dealt  with  effective  use 
of  the  disjoint  product  form  to  compute 
system  reliability  (see  [1),[2).[33. 
C6j,[n],n23,n3j,n«j.ti73). 


Unfortunately,  computing  Pr(n  )  can 

i  I  * 

lino  he  quite  complex.  What  we  would 
like  to  investigate  In  this  paper  are 
systems  for  which  we  can  write  the 
disjoint  product  In  aueh  a  way  that  the 
turns  R  rail  ho  computed  directly  as 
1  >  1 

Intersections  of  component  events 


R 


1 


,  .X 


k 


where  \j  Is  the  event  that  component  J 
operate. i  and  Xj  Is  the  event  that 
component  J  falls.  This  loads  to  the 
following  definition. 


Definition!  A  coherent  system  la 
uheTiable  If  there  Is  an  ordering  Tj, 

•r~ ITT." TV  of  ml  np.il.hs  such  that  the  event 
lt‘  can  be  written  as  a  disjoint  product 

or  component  events.  The  corresponding 

i:  xnress  i  on  for  R  is  called  a  shelling 

♦ 

for  the  system. 


It  Is  clear  that  If  a  shelling  can  be 
obtained  for  a  system,  then  the 
probability  of  system  operation  can  he 
written  Immediately  as  the  sum  of  the 
crob  .  M 1 1 t 1 es  of  the  events  H  ,  which 

v  i  1 

mu  (,e  written  In  turn  as  a  product  of 
o  a  n,  p  n  n  o  n  t  probabilities: 

r>  ( R  A  .  )  -  (  f'«p  .  > .  •  .  )p.  . . .  P  , 

r  i .  i  •*  t  J  t  J  t  *  1  J  k 


by  us',  r.g  the  Independence  of  component 
e  yen t  s . 


example :  Consider  the  coherent  system 

Ccffned  ori  component  set  H  -  |  I  ,  ?  .  3  ,  *1 , 5  ) 

wh|  i'h  lias  the  set  of  mlnpaths  |  I 2  5 ,  1  4 ,  2  X  , 
4  | .  (I'ar  simplicity,  we  will  use  the 
same  lit- tat!  an  for  7  j  and  .1  j  .  )  This  Is 
rot  sbei; able  In  Hie  order  given,  since 

the  event.  (  ~}  )<  HI)  ■*  «  X,X(-  X(X,X,X, 

cio not  be  written  as  a  single  disjoint 
l'"i)'.luct  of  component  events.  The 
orlcrlng  (  1  4 , 24  ,  Jt| ,  t  C  1 )  ,  however,  J_s  a 
shelling,  for  the  system  operation  can 
n:w  hr  written  in  disjoint  pro  loot  form 


R  .,  (14)  *  (141(24)  •  (14 ) ( 2  4 ) ( J  4 ) 

i 

•  ( Vi) (24) ( 14) ( 1 2J) 

*  X,X4  *  3lV»  ‘  !lV]S 
.  x,x.,x3^ 


Pf.(ii  )  -  (  mp,  )  ( ldpjj  >  ♦  P|(1«P2)(,«p,|) 

•  PjP^  1*Pj)  OrtP„> 

♦  ( 1dp1 ) ( 1wp2 ) ( l»p  Jp^ . 

There  Is  a  second  way  that  she  1 1 ab 1 1 1 1 y  can 
aid  I n  reliability  computation,  and  this 
does  not  depend  ori  knowing  a  specific 
shelling  at  all.  It  turns  out  that 
sliel  lability  provides  combinatorial 
structure  to  a  system  which  restricts  the 
number  of  operating  configurations  (x  such 
that  $ ( x )  -  I)  with  a  given  number  of 
operating  components.  This  makes  It 
possible  to  obtain  approx  1 ma 1 1 one  to  system 
reliability,  under  the  assumption  of  equal 
component  fatlure  probabilities,  which  are 
considerably  more  accurate  than  those  that 
can  be  obtained  without  having  the  property 
of  she  1 1 ab 1 1 1 1 y .  Moreover,  there  are  very 
efficient  methods  of  obtaining  these 
approximations,  and  so  such  approximation 
techniques  are  useful  when  the  system  Is 
too  complex  to  allow  exact  computation  of 
reliability.  The  details  of  this  procedure 
are  somewhat  Involved,  and  the  reader  Is 
urged  to  consult  [5]  and  [14]  for  details. 

r.hel  1  ab  1 1 1  ty  ,  therefore,  is  a 
convenient  property  for  a  system  to  have. 

In  terms  of  facilitating  reliability 
computation.  It  Is  not  a  property  held  by 
all  systems.  Take,  for  example  the  four 
component  coherent  system  whose  mlnpnths 
are  |l2,J4|.  Neither  of  the 

events  (12H14)  -  X^X,,  ♦  X^X  X^  nor 

(Jli)(l.;)  -  XXX,  ♦  X,X„X  X  can  be 

1x3  I  ?  1  4 

written  as  a  single  product  of  component 
events,  and  so  this  system  Is  not 
shellable.  There  are,  however,  a  large 
number  of  classic  reliability  problems, 
with  Important  applications,  for  which  the 
underlying  system  Is  shellable.  For  the 
remainder  of  this  paper,  we  give  examples 
of  these  systems,  along  with  the 
appropriate  shellings. 

2.  Hatrold  Systems 


M a t. r o l  d s  make  up  a  class  of  coherent 
binary  systems  that  have  been  studied 
extensively  In  a  variety  of  contexts.  In 
particular,  they  have  been  shown  to  be 
especially  powerful  (see  [8J,  [ 9  ] ) 

1  nchara  ct  er  I  ?.  I  ng  combinatorial 
optimization  problems  for  which  efficient 
solution  algorithms  exist.  Matrolds  are 
shellable  ([15],  Corollary  3.2..?)  anC  thus 
provide  a  class  or  systems  for  which  the 
properties  described  In  Section  1  hold. 

In  this  section,  we  describe  two  Important 
classes  of  systems  that  are  matrolds  and 
that  are  of  Interest  In  the  study  of 
system  rel lability. 


"be  probability  of  system  operation  can 
he  written  directly  as 


A .  Hraph  Connectedness:  Much  of  the 
af.'ily  of  system  reitabfltty  lias  employed 
network  models.  One  measure  of  system 
reliability  used  in  the  study  of  computer 
communications  networks  Is 

t-f.Coperat  1  ng  paths  exist  between 
a  1 1  node  pairs]. 

! n  the  case  where  only  arcs  fall,  the 
underlying  coherent  binary  system  Is  what 
Is  known  as  a  graphic  matroUl.  For  the 
graph  Illustrated  in  Figure  1  ,  the 


jobs 


Figure  l 

m  inpat  ha  are  ||24,  IPS,  13’l,  130.  115, 
2.14,  215,  24r>|,  representing  the  spanning 
Irena  In  the  graph.  These  produce  the 
•’  hcl  1  l  up 

ii  -  124  »  MlTi){t26)  •  (TpY) ( 1 25) ( l 34 ) 

P 

♦  n~5)  <  t  2  5 )  <  rf4)  (i  3i) 

• ;  T7>  4 )  ( UT, )  ( TT7 )  ( Y '35  HU  5  ) 

<  <  tth  1 1  r?5  >  <  v 34  >  <  yti  )  t  745  u .?  3  4  > 

*  ( 'f?T» )  ( iT5 1  ( TIPi )  (  rpj)  ClTi)  (714 )  (235) 

<  ( ~t )  ( 777  1  <  TTS )  ( TTi )  ( TTi  >  ( Tv\ )  ( 51s )  ( 2  4  5 ) 


-  Vvx4 


*1  *2^**5  *  XtVjXi 


•  *0*0*5  *  X00Vs 

‘  *ix?x5Vr,  *  *1*2*3  Vs 


r x.  *  ?  x  x.,x„ 


Inis  class  of  systems  has  been  studied 
extensively,  not  only  because  of  Its 
importance  f rom  an  application 
standpoint,  hut  also  because  of  the  rich 
structure  It  contains. 


5.  Personnel  Assignment  Systems:  We  now 
discuss  .1  second  class  of  systems,  which 
we  believe  has  Important  practical 
n  (>  n  1  ,  cat  I  >  ns  .  Thin  system  relates  to  the 
reliability  of  a  personnel  system. 

Figure  ?  Illustrates  the  problem.  The 
left  hand  set  of  nodes  corresponds  to 
jobs  critical  to  the  survlvlal  of  an 
operation.  The  right  hand  set  of  nodes 
corresponds  to  personnel.  An  arc  Is 
Inserted  between  a  right  hand  and  left 


opera tlnq  state: 

$  ©  ®  0  ©  0  © 

I  I  I  I  I 

a  b  d  c  e 


failed  state  (no  way  to  cover  both  jobs  a  and  b): 

(!)  $  ©  $  ©  ©  © 


Figure  2:  A  personnel  system 

hand  node  If  the  Job  onn  be  filled  by  the 
cor res  pond  1 ng  person.  This  model  Is,  Of 
course,  the  classic  assignment  model .  In 
a  reliability  setting  thr  components 
correspond  to  personnel.  The  rallurc  of  a 
person  corresponds  to  that  person  being 
unable  to  work,  and  the  system  operates 
any  time  the  set  of  operating  persons  can 
cover  all  the  required  Jobs.  Thun,  the 
measure  of  system  rellab'llty  Is 

fr[the  operating  persons  can  cover 
all  required  JobsJ. 


Note  that  given  the  set  of  failed  persons, 
the  determination  of  whether  the  system 
<can  operate  Is  not  completely 
stra t ghtforward .  In  fact,  It  Involves  the 
solution  of  an  assignment  problem. 

This  system  Is  what  Is  known  as  a 
t r ansver sa 1  matro 1 d ■  If  there  are  n  Job3, 
then  mlnpaths  consTst  of  sets  of  n  persons 
with  the  property  that  there  exists  a  way 
of  assigning  those  n  persons  to  the  n  Jobs. 
For  the  system  of  Figure  ?,  the  mlnpaths 
are  (12346,  1 2  3  *1 7 ,  1?3'>6,  12357,  12467  , 
12667,  l  3 11 6  6 ,  13157  ,  1  4567  ,  23456,  23157, 
24567  I  ,  and  these  produce  shelling  (In  the 
order  g 1 ven  ) 

K.  - 


12  3**6 


12  3  16  7 


'  X.V3*iV6  *  WlVsVr 

*  V**,V«X7  *  X>X2*,V.,V> 

‘  Xt?2Vl\X6  *  XI?2X3X1X5?6X7 

*  X,*2*,VsV7  *  V/iV-A 


t.  i.inuar  Systems 


A  necond  broad  category  of  ahellable 
systems  Includes  those  systems  which  can 
be  re  presented  as  linear  systems. 
Specifically,  suppose  the  components  of  a 
system  correspond  to  real  variables  which 
are  subject  to  some  not  of  linear 
constraints  (equalities  or  Inequalities). 
Component  failures  correspond  to  setting 
the  corresponding  variables  to  r.ero,  and 
(.hr  system  then  operates  If  the  remaining 
vat-1  i Men  can  still  take  values  which 
satisfy  the  constraints.  Wo  need  to  make 
a  f  1 1  r  t  n  e  r  assumption  that  t  h  o  linear- 
system  la  nonadegenerato  (in  the  linear 
programming  sense),  although  the  two 
examples  given  here  will  bo  non de goner  a t e . 
It  can  no  shown  ((7J,  f.emma  2.1)  that 
•seat-  systems  are  shollable,  and  so  the 
results  of  Section  l  apply. 

A.  H each  ability;  Pup  pose  we  are  given  a 
11  reeled  network  (1  whoso  arcs  arc  subject 
t”  failure.  The  system  operates  If  the 
operating  arcs  admit,  directed  paths  from 
a  given  source  node  s  to  all  other  nodes 
of  ri .  As  example  Is  given  by  the  network 
in  Figure  3-  The  linear  r epr esen t a 1 1  on 


Figure  J 

of  t  -i  l  s  system  Is 


'*•  Transportation  Problems:  Here  we  are 
given  a  set  of  m,  supply  points  with 
supply  a,  available  at  supply  point  t,  ant 
"J  demand  points,  with  demand  b,  required 
at  demand  point  J.  We  assume  that  total 
supply  equals  total  demand,  hut  that  no 
proper  subset  or  supply  and  demand  points 
can  have  supply  equal  lo  demand.  Each 
link  C I  ,  J  >  between  supply  point  1  and 
demand  point  J  la  subject  to  mi  lure,  and 
the  system  operates  ir  the  operating  links 
are  sufficient  to  ship  from  available 
supplies  to  meet  the  demands.  As  an 
example  we  take  the  three  supply,  two 
demand  system  with  a,-?,  ai-6,  a,. 7,  h.-D, 
anil  b;.-l  0.  The  I  Innar  representation  of 
this  3yolem  Is 

C  on  po nen l 

'  ?  3  'i  b  6 

tlnk  ( I . 1 )(1 ,?) (?,i)(2,p) ( 3, l)(3(?) 


y2  *  *i,  *  yfe  *10 

y,iO  y2t0  y j iO  y^O  y^iO  y6tO 

and  the  mlnpaths  are  |l3'i6,  1k>j6,  ,'>3116, 
?3r)fi|.  These  produce  the  shelling 

-  (  1  i'»6)  ♦  (11T5)  ( 1  kb6) 

♦  ( Tlii? )  ( iTiTb )  (  2  3 II 6  ) 

♦  (TT*S)<Tii35)(57ii6>(2it.,6) 


■••y. 


•  y.-. 


-  I 
*  1 

-  1 


y^20,  y^nn,  y  (( >  0 ,  y^O 

■>!ih:i;  any  solution  which  satisfies  these 
.ui-itni  nts  must  have  the  property  that 
*  h*-  ires  cor  res  opr,  Ji  ng  to  nonzero 
com  pt-ne-it.  s  admit  paths  from  s  to  u ,  v, 
id  w .  One  can  check  that  the  mlnpaths 
For  this  system  are  (l2«,  1?5,  IJA,  l J5 f 
these  produce  the  shelling 


R  •>  (I .? «  > 


-  X 


(  f  ?M)(  t  »?5  ) 

•  ( T7T  >  { fTJ )  ( i  3  k ) 

*  ( T7»T )  (  Yz~, )  ( ijli )  ( i  33 ) 

iV*  •  V.’V.,  •  X,5,:X3XR 


-  X,X3X*/3 


Conclusion 
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We  end  the  paper  with  a  word  on 
algorithms  which  rind  shellings  Tor  these 
systems,  since  good  shelling  algorithms 
will  lead  naturally  to  good  algorithms  for 
computing  system  reliability.  Shelling 
algorithms  do  exist  Tor  the  problems  given 
here  that  run  In  time  polynomial  In  the 
number  of  mlnpaths.  Those  for  matrold 
complexes  can  be  construed  from  [ H J ,  and 
those  for  linear  systems  from  17],  Lemma 
?.l.  Neither  of  these  papers,  however, 
give  direct  shelling  algorithms,  and 
considerably  more  efficient  algorithms  can 
be  Obtained  by  considering  the  extra 
structure  contained  In  tho  systems 
presented.  These  algorithms  will  he 
covered  In  a  suhftf*']ii«*nt  pap**r  ■ 
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